Lucene search

[email protected]CVE-2024-23105

HistoryMay 14, 2024 - 5:15 p.m.

CVE-2024-23105

2024-05-1417:15:38

CWE-348

[email protected]

web.nvd.nist.gov

fortiportal

vulnerability

use of less trusted source

bypass

ip protection

crafted packets

http

https

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

A Use Of Less Trusted Source [CWE-348] vulnerability in Fortinet FortiPortal version 7.0.0 through 7.0.6 and version 7.2.0 through 7.2.1 allows an unauthenticated attack to bypass IP protection through crafted HTTP or HTTPS packets.

Affected configurations

NVD

Node

fortinetfortiportalRange7.0.0–7.0.6

fortinetfortiportalMatch7.2.0

fortinetfortiportalMatch7.2.1

CPENameOperatorVersion
fortinet:fortiportalfortinet fortiportalle7.0.6
fortinet:fortiportalfortinet fortiportaleq7.2.0
fortinet:fortiportalfortinet fortiportaleq7.2.1

CPE	Name	Operator	Version
fortinet:fortiportal	fortinet fortiportal	le	7.0.6
fortinet:fortiportal	fortinet fortiportal	eq	7.2.0
fortinet:fortiportal	fortinet fortiportal	eq	7.2.1

CNA Affected

[
  {
    "vendor": "Fortinet",
    "product": "FortiPortal",
    "defaultStatus": "unaffected",
    "versions": [
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.1",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.6",
        "status": "affected"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-24-021

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

Related for CVE-2024-23105

cvelist1 nvd1 vulnrichment1